Which type of Prisma Cloud Enterprise alert supports autoremediation?

Question

Options

• Anetwork
• Baudit
• Canomaly
• Dconfig

• A
  4% (2)
• B
  2% (1)
• C
  2% (1)
• D
  91% (41)

Explanation

Config (D) alerts support autoremediation because they flag concrete, deterministic resource misconfigurations - such as an S3 bucket with public access enabled - that can be corrected by executing a predefined CLI command or API call automatically. Since the "wrong state" and the "fix" are both well-defined, Prisma Cloud can trigger a remediation script without human judgment.

Network (A) alerts detect suspicious traffic flows or exposed ports; remediation requires understanding intent and context, making automated fixes risky. Audit (B) alerts fire on user activity and API events - they are forensic by nature and don't map to a reversible resource state. Anomaly (C) alerts rely on ML-detected behavioral baselines, meaning the "correct" action is ambiguous and varies per environment.

Memory tip: Think C for Correct-the-config - only a misconfigured resource has a clear, scriptable fix, which is exactly what autoremediation needs.

No community discussion yet for this question.